3ds Vulnerability Advisory Catalog

Total 61 security vulnerabilities recorded for 3ds software and firmware.

← Back to All Vendors
CVE-2023-1996 MEDIUM
Component: 3dexperience

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute ...

📅 2023-05-19
CVSS 6.1 Dossier →
Component: delmia_apriso

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution. ...

📅 2023-04-21
CVSS 8.5 Dossier →
Component: delmia_apriso

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue req...

📅 2023-04-21
CVSS 7.5 Dossier →
CVE-2023-2139 MEDIUM
Component: delmia_apriso

A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary scrip...

📅 2023-04-21
CVSS 5.4 Dossier →
CVE-2023-1288 MEDIUM
Component: enovia_live_collaboration

An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the serv...

📅 2023-03-09
CVSS 6.8 Dossier →
CVE-2023-1287 CRITICAL
Component: enovia_live_collaboration

An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution. ...

📅 2023-03-09
CVSS 9.0 Dossier →
Component: teamwork_cloud

An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbi...

📅 2020-12-28
CVSS 7.8 Dossier →
CVE-2014-2072 CRITICAL
Component: catia

Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks...

📅 2020-01-08
CVSS 9.8 Dossier →
CVE-2014-2073 CRITICAL
Component: catia

Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "C...

📅 2018-04-10
CVSS 9.8 Dossier →
CVE-2013-4721 UNKNOWN
Component: push2rss_3ds

SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL comman...

📅 2013-06-27
CVSS 7.5 Dossier →
CVE-2012-4883 UNKNOWN
Component: 3dvia_composer

Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse ...

📅 2012-09-07
CVSS 6.9 Dossier →
CVE-2012-4882 UNKNOWN
Component: 3d_xml_player

Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll ...

📅 2012-09-07
CVSS 6.9 Dossier →
CVE-2009-0809 UNKNOWN
Component: enovia_smarteam

The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenti...

📅 2009-03-04
CVSS 3.5 Dossier →
Page 3 of 3 (61 Total Records)